$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/fd89b5ac-8682-3e38-80c1-9b34f219fadd.roa File: fd89b5ac-8682-3e38-80c1-9b34f219fadd.roa (raw, json) Hash identifier: tK908DZEDsAWFfKAcD2btCeKGqdLTVErEzPdrBGY4yE= Subject key identifier: 82:70:E0:23:52:24:DE:98:45:A2:7F:4E:2D:EE:CC:05:73:B4:8A:CB Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584BA2379578F457A561D48CB3E0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/fd89b5ac-8682-3e38-80c1-9b34f219fadd.roa Signing time: Sat 25 Oct 2025 01:00:31 +0000 ROA not before: Sat 25 Oct 2025 01:00:31 +0000 ROA not after: Fri 23 Jan 2026 02:00:31 +0000 asID: 22616 IP address blocks: 170.85.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a2:37:95:78:f4:57:a5:61:d4:8c:b3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 25 01:00:31 2025 GMT Not After : Jan 23 02:00:31 2026 GMT Subject: CN=46aad45b-5574-4764-acf1-2669db13ae09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7e:31:c5:5a:cd:a7:c7:e0:45:fd:d1:e1:2e: c9:ee:65:37:d7:9b:fb:9d:93:cd:a3:58:7e:37:69: ec:0e:ef:3b:dc:61:73:af:fe:ed:52:89:bf:23:d6: 98:e7:ee:c5:c8:68:cc:0d:1a:4d:95:77:79:30:b1: f8:d2:bc:94:78:7c:ed:46:2c:97:df:43:9f:4a:bc: 61:26:44:5d:eb:2f:dd:3c:46:ce:f9:05:c6:f4:bc: a1:d0:4d:25:f7:a1:57:f5:75:d3:27:02:eb:2d:e2: 1e:77:17:43:ea:98:59:50:43:4f:0e:67:56:4b:0f: fc:b5:9e:76:22:a8:38:6f:2c:15:df:c7:1a:a0:f7: c8:a9:a9:36:a0:a7:6a:c4:d0:02:de:e2:ef:0b:67: c8:d1:55:72:76:ce:17:93:fa:3c:12:08:cf:92:b6: 7b:17:04:1f:e6:8e:6b:67:46:32:6c:e0:d2:51:30: 76:e1:46:85:81:44:7c:98:c5:e8:78:e1:6b:6d:94: db:d4:56:df:a2:08:35:3f:bf:4e:73:94:1d:23:87: 2f:3b:67:7e:90:ba:1a:2a:0a:79:3c:4a:ca:66:02: ea:9c:12:90:21:f3:4d:53:40:10:3f:2e:3d:f8:d9: d6:0f:1f:ea:24:5a:ba:43:fe:70:8e:46:c8:e1:3a: be:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:70:E0:23:52:24:DE:98:45:A2:7F:4E:2D:EE:CC:05:73:B4:8A:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/fd89b5ac-8682-3e38-80c1-9b34f219fadd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:5b:e1:1f:8e:83:64:76:d1:2b:4f:3f:28:a1:c9:c5:01:93: 20:56:f0:7a:89:b3:bb:0d:fc:51:1d:9f:57:ed:a2:37:3d:92: fe:3b:bf:aa:4d:ef:73:ae:f6:b9:49:3d:3d:06:fc:9d:3a:7a: 3c:5e:9d:0d:39:84:6f:86:1f:b3:07:e9:7c:7f:0d:2a:da:54: cb:ae:5a:60:87:a4:d3:5d:cf:8d:b7:91:cc:2d:01:45:5a:6f: db:cc:c8:bc:ff:bb:d4:e0:48:0f:08:7e:fd:b3:94:1e:23:0c: a5:53:d4:81:0a:49:23:17:ae:8e:25:e3:5f:30:a2:a7:e9:89: 2b:ae:14:15:39:4b:28:ee:8a:ee:20:1f:06:a6:07:ee:e8:f7: e8:7a:81:ef:c4:63:75:b7:e9:ce:03:9c:e9:f5:04:c1:98:a1: 18:2a:4f:39:69:93:ce:ec:26:56:dc:84:70:b5:51:e1:f9:9d: bb:4b:b8:a1:88:29:7e:86:b1:54:76:ba:57:ec:ae:00:f7:c6: b4:8b:8b:3e:53:cf:c6:28:bb:d1:a8:50:ec:ca:f0:3e:dc:c6: 29:9d:df:21:92:33:1a:08:d9:e4:8e:20:6e:ff:ac:90:97:6b: d9:e2:2c:b8:ef:d9:7f:02:bd:96:79:e9:cc:09:70:2b:bb:29: 5c:7b:77:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuiN5V49FelYdSMs+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyNTAxMDAzMVoXDTI2MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk NDZhYWQ0NWItNTU3NC00NzY0LWFjZjEtMjY2OWRiMTNhZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj34xxVrNp8fgRf3R4S7J7mU315v7nZPNo1h+ N2nsDu873GFzr/7tUom/I9aY5+7FyGjMDRpNlXd5MLH40ryUeHztRiyX30OfSrxh JkRd6y/dPEbO+QXG9Lyh0E0l96FX9XXTJwLrLeIedxdD6phZUENPDmdWSw/8tZ52 Iqg4bywV38caoPfIqak2oKdqxNAC3uLvC2fI0VVyds4Xk/o8EgjPkrZ7FwQf5o5r Z0YybODSUTB24UaFgUR8mMXoeOFrbZTb1Fbfogg1P79Oc5QdI4cvO2d+kLoaKgp5 PErKZgLqnBKQIfNNU0AQPy49+NnWDx/qJFq6Q/5wjkbI4Tq+uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJw4CNSJN6YRaJ/Ti3uzAVztIrLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZmQ4OWI1YWMtODY4Mi0z ZTM4LTgwYzEtOWIzNGYyMTlmYWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlX8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlb4R+Og2R20StPPyihycUBkyBW8HqJs7sN/FEdn1ftojc9kv47v6pN 73Ou9rlJPT0G/J06ejxenQ05hG+GH7MH6Xx/DSraVMuuWmCHpNNdz423kcwtAUVa b9vMyLz/u9TgSA8Ifv2zlB4jDKVT1IEKSSMXro4l418woqfpiSuuFBU5Syjuiu4g HwamB+7o9+h6ge/EY3W36c4DnOn1BMGYoRgqTzlpk87sJlbchHC1UeH5nbtLuKGI KX6GsVR2ulfsrgD3xrSLiz5Tz8You9GoUOzK8D7cximd3yGSMxoI2eSOIG7/rJCX a9niLLjv2X8CvZZ56cwJcCu7KVx7dzo= -----END CERTIFICATE-----Generated at Wed Nov 5 04:02:33 2025 by rpki-client